jedisct1/libsodium on Hacker News

…around for a while, so probably the reason it was posted is that version 1.0.19 was just released: https://github.com/jedisct1/libsodium/releases/tag/1.0.19-RE... Updated NuGet and Swift packages are going to be uploaded soon. AEGIS-128X…

comment by jedisct1 · 2023-09-15 · in Libsodium: A modern, portable, easy to use crypto library

Thanks, both are good general tips, but in this specific case https://github.com/jedisct1/libsodium I would guess that the author of the library has full control both over optimal parallelization of a build and minimal autoconf, but he can…

comment by acqq · 2023-04-14 · in Zig build system

Can anyone recommend between Librandombytes and libsodium ramdombytes? https://github.com/jedisct1/libsodium/tree/master/src/libsod...

comment by dogeprotocol · 2023-01-27 · in Librandombytes – a public domain library for generating randomness

…pretty clearly: [1], lines 18-23. 0: https://www.jcraige.com/an-explainer-on-ed25519-clamping 1: https://github.com/jedisct1/libsodium/blob/master/src/libsod...

comment by opheliate · 2022-02-09 · in Dangerous toys: Anything to ed25519 (SSH Keys)

…but as far as I can tell at first glance, this is a working implementation of X25519. 1: https://github.com/jedisct1/libsodium/blob/7993f5ec5199b6637...

comment by opheliate · 2021-06-12 · in Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

…this... then I looked at his biggest project, libsodium, and this is the second most recent bug https://github.com/jedisct1/libsodium/issues/1038 ``` invalid usage on desktop chrome when running crypto_pwhash Error: invalid usage at h…

comment by shp0ngle · 2021-03-29 · in It Doesn't Work

It looks like at least libsodium implements constant-time array comparison in C. https://github.com/jedisct1/libsodium/blob/ae4add868124a32d4... Edit: I'm not disagreeing that C compilers are free to optimize stuff like this out; this…

comment by creata · 2021-03-22 · in OpenSSL will release a high-severity issue fix on 25th

…because the GitHub link in this blog post should've been to https://github.com/google/tink or https://github.com/jedisct1/libsodium or some library like them.

comment by HelenPark · 2021-01-07 · in Independent Audit: Insights into the Source Code of Boxcryptor

…So far we've been focusing on encryption at rest. Can you tell me more about your use case? [1] https://github.com/jedisct1/libsodium [2] https://github.com/google/tink

comment by cryptbe · 2020-08-30 · in So you want to roll your own crypto?

…store keys. Deterministic nonces have also been something that libsodium appears to have rejected: https://github.com/jedisct1/libsodium/issues/392 If you're looking at it from a misuse-prevention perspective, Tink is probably a major step…

comment by beefhash · 2020-05-17 · in Tink – Cryptographic APIs that are secure, easy to use correctly

…with poor, nonexistent, or misconfigured AES accel. ³ this relatively straightforward operation https://github.com/jedisct1/libsodium/blob/master/src/libsod...

comment by microcolonel · 2020-04-24 · in Why not “Why not WireGuard?”

…It's still there. I did. There's less of it. I've filled the bug, here's what's this about: https://github.com/jedisct1/libsodium/issues/937 Here's the relevant quote from annex J of the (heavy, I have printed it) C99 specifications:…

comment by loup-vaillant · 2020-03-13 · in Why I’m Using C

…resistance nowadays. That being said, ed25519ph is easier to protect against fault attacks, see https://github.com/jedisct1/libsodium/issues/170

comment by dependenttypes · 2020-03-13 · in EdDSA, Ed25519, Ed25519-IETF, Ed25519ph, Ed25519ctx, HashEdDSA, PureEdDSA, WTF?

…with the tradeoff they find acceptable. A one-liner isn't enough for that conversation. [0] https://github.com/jedisct1/libsodium/issues/802 [1] https://download.libsodium.org/doc/memory_management#zeroing...

comment by shakna · 2020-01-28 · in CacheOut: Leaking Data on Intel CPUs via Cache Evictions

…of this line? Why do you think it's there if the C code using volatile is enough on its own? https://github.com/jedisct1/libsodium/blob/a26467874a512de30... It's a workaround to prevent optimisations because that happens to be how some…

comment by chrisseaton · 2019-07-17 · in Who's afraid of a big bad optimizing compiler?

…Look at all the contortions libsodium goes to do coerce all the compilers to do the right thing :) https://github.com/jedisct1/libsodium/blob/a26467874a512de30...

comment by zimbatm · 2019-07-17 · in Who's afraid of a big bad optimizing compiler?

…e.g. libsodium refused to fix. Hopefully crypto maintainers will get to their senses eventually. https://github.com/jedisct1/libsodium/issues/802

comment by rurban · 2019-06-22 · in SSH gets protection against side-channel attacks

…target, again via emscripten. The c source code is really excellent[1]. It's worth browsing! [0]- https://github.com/jedisct1/libsodium.js [1]- https://github.com/jedisct1/libsodium/tree/master/src/libsod...

comment by kwindla · 2019-04-10 · in Measuring the overhead of WebAssembly using libsodium

Yup, if you want to see the state of the art in this, here it is from libsodium: https://github.com/jedisct1/libsodium/blob/master/src/libsod... They sum it up in their docs like this: - On Windows systems, the RtlGenRandom() function is…

comment by shittyadmin · 2019-01-23 · in 7-zip broken password random number generator

…and Webassembly. Look at the release notes on the releases page to see what kind of things they do. https://github.com/jedisct1/libsodium/releases

comment by wolf550e · 2018-12-20 · in Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice

There are plans to address this in libsodium. Here are some relevant issues: https://github.com/jedisct1/libsodium/issues/361 https://github.com/jedisct1/libsodium/issues/392

comment by bascule · 2017-10-17 · in Miscreant: a multi-language misuse resistant encryption library

https://github.com/jedisct1/libsodium/blob/be5e5a53b35961e32... They either do SecureZeroMemory for windows, memset or bzero for linux and in worst cases they manually wipe the array which is what memguard does, so, how is sodium_memzero…

comment by dimitri1995 · 2017-04-22 · in Show HN: Securely Handle Encryption Keys in Go

How does this compare to libsodium(.js)[1][2]? [1] https://github.com/jedisct1/libsodium [2] https://github.com/jedisct1/libsodium.js

comment by 0XAFFE · 2017-03-08 · in SJCL – Stanford JavaScript Crypto Library

Site is up on my end. Anyways, here's the GH page for anyone interested: https://github.com/jedisct1/libsodium

comment by remx · 2017-03-05 · in The Sodium crypto library

That's coming soon: https://github.com/jedisct1/libsodium/blob/master/src/libsod...

comment by CiPHPerCoder · 2017-01-10 · in The design of Chacha20

…languages (and still sucks in those). I suspect that's why few used that as a criticism of PHP. - https://github.com/jedisct1/libsodium Libsodium: modern cryptography that you can likely find bindings for in your favorite programming…

comment by CiPHPerCoder · 2016-12-29 · in Who’s on Your 2016 Web Development Thank You List?

…Perhaps with evidence of that as a possibility, we could use a good crypto library instead, eg. https://github.com/jedisct1/libsodium

comment by mitchtbaum · 2016-10-20 · in OpenSSL after Heartbleed

…that input to be passed into the rust libsodium wrapper through the protocol implementation. [1] https://github.com/jedisct1/libsodium

comment by tinco · 2016-07-08 · in Thrussh: Portable SSH client and server library in Rust

What about https://github.com/jedisct1/libsodium then? Very high profile, no CVEs found to date. EDIT: Can't respond to lambda below. I was responding to THIS assertion, not proposing libsodium as a general purpose openssl replacement:…

comment by CiPHPerCoder · 2016-05-03 · in OpenSSL Security Advisory

…crypto_aead_aes256gcm_encrypt() crypto_aead_aes256gcm_decrypt() https://github.com/jedisct1/libsodium

comment by CiPHPerCoder · 2016-04-11 · in Pwncloud – Bad crypto in the Owncloud encryption module

…code) version of NaCl by the folks at dnscrypt. Maybe I missed something in my research? [1] https://github.com/jedisct1/libsodium

comment by green7ea · 2015-09-26 · in Keybase's New Key Model

How does it compare to the libsodium implementation: https://github.com/jedisct1/libsodium/blob/master/src/libsod... Btw, libsodium prefers salsa20 instead of chacha20, I don't know why; but I trust they made a good decision.

comment by daurnimator · 2015-07-15 · in PCG, A Family of Better Random Number Generators

…NaCl referred to in the gist this NaCl? http://nacl.cr.yp.to/ Or does it refer to libsodium here? https://github.com/jedisct1/libsodium I realize that the library is probably available via my package manager, but it'd be nice if the…

comment by Xorlev · 2015-05-23 · in Cryptographic Right Answers

…there is a portable implementation (well, direct port of the SSSE3 code) of AES-CTR in NaCl: https://github.com/jedisct1/libsodium/tree/master/src/libsod... . Don't expect it to be fast or anything, but it exists.

comment by pbsd · 2015-04-02 · in Truecrypt report

…/article.gmane.org/gmane.comp.security.phc/2658 libsodium added ROT13, fast, keyless, powerful cipher https://github.com/jedisct1/libsodium/commit/23f1c90c682484f...

comment by sarciszewski · 2015-04-01 · in List of April Fools' Day Announcements

…any type of centralized authority, and all traffic is encrypted using the sodium crypto library ( https://github.com/jedisct1/libsodium ). Full disclosure: Tox has not yet been professionally audited.

comment by Jfreegman · 2015-02-12 · in Toxic – A distributed, secure, command-line based instant messenging client

…encrypted data. I'm hoping that jedisct1 will add a parallel functionality to libsodium soon. :) https://github.com/jedisct1/libsodium/issues/231

comment by sarciszewski · 2015-02-04 · in RansomWeb: Crooks Start Encrypting Websites and Demanding Thousands of Dollars

Might also want to checkout libsodium ( https://github.com/jedisct1/libsodium ).

comment by urras · 2014-12-29 · in Some gripes about nacl

…fork of NaCl, with a compatible API, and an extended API to improve usability even further. Source: https://github.com/jedisct1/libsodium/blob/master/README.mar... I see DJB (original nacl creator http://nacl.cr.yp.to/ ) appears to…

comment by 23david · 2014-12-29 · in Some gripes about nacl

…breaking interoperability with messages encrypted with the current version of crypto_secretbox. [1] https://github.com/jedisct1/libsodium/blob/17932c782e5900ac8...

comment by agwa · 2014-12-29 · in Some gripes about nacl

…even further." I've been using it in a toy project of mine and so far I'm very impressed! 1. https://github.com/jedisct1/libsodium

comment by chrisballinger · 2014-10-19 · in Making sure crypto remains insecure [pdf]

…to be the best way to currently wipe out sensitive data is to implement something like in libsodium https://github.com/jedisct1/libsodium/blob/master/src/libsod... 1- Try to use SecureZeroMemory() on Windows 2- Use memcpy_s() if available,…

comment by doe88 · 2014-04-14 · in TrueCrypt Security Assessment [pdf]

…wrote his own crypto library, NaCL: http://nacl.cr.yp.to/ It's been packaged up as libsodium: https://github.com/jedisct1/libsodium That said, even DJB doesn't trust himself to write bug-free C code: http://cr.yp.to/qmail/qmailsec-20071101.…

comment by grosskur · 2014-04-12 · in Ask HN: Negative OpenSSL sentiments

…free for FOSS despite patents, and more understandable for mortals). [0] http://curvecp.org/ [1] https://github.com/jedisct1/libsodium [2] http://nacl.cace-project.eu/box.html [3] http://blog.cryptographyengineering.com/2012/05/how-to-choos…

comment by nly · 2014-02-28 · in TLS Symmetric Crypto

…does not do the same thing as NaCl. NaCl: https://gist.github.com/anonymous/9234738 libsodium: https://github.com/jedisct1/libsodium/blob/master/src/libsod...

comment by eliteraspberrie · 2014-02-26 · in How to safely generate a random number

Most 3rd parties are building on libsodium, not the Nacl code: https://github.com/jedisct1/libsodium

comment by zdw · 2014-01-24 · in DNSSEC surpasses 50% of root domains

…nobody really wanted to fix it until Sodium came along. [1] https://www.tarsnap.com/scrypt.html [2] https://github.com/jedisct1/libsodium [3] https://github.com/thejh/node-nacl [4] https://github.com/tonyg/js-nacl

comment by drostie · 2013-07-04 · in DecryptoCat

…on what you need (I can't say how good these are): http://www.keyczar.org http://nacl.cr.yp.to https://github.com/jedisct1/libsodium http://www.gnupg.org

comment by Osmium · 2013-05-27 · in You are dangerously bad at cryptography

Build scripts for iOS, Android and Windows (using MingW under MSYS): https://github.com/jedisct1/libsodium/tree/master/dist-build The end result on Windows is a native DLL library.

comment by jedisct1 · 2013-03-07 · in Introducing Sodium, a new cryptographic library